Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa
File: c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa (raw, json)
Hash identifier: 3jwtnWJLL/7MPhHa6cPp2PNgem4Eq7U1Pc1dtsuOD7o=
Subject key identifier: CC:3B:91:D7:5A:4B:3F:77:9B:D5:77:0A:86:EE:9F:E1:56:3F:DE:FA
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285849194197B04D47E3A6451FE2AC
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 396566
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:97:b0:4d:47:e3:a6:45:1f:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=69895a06-6e0a-4b2d-8a24-fb29e29d0152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:6b:3c:4e:d3:14:cc:99:2e:41:cf:2e:a3:
8a:0c:0c:be:f2:a7:98:c8:10:32:93:b3:2a:a7:75:
2f:a6:71:dc:d7:26:14:fa:6c:b5:d1:2c:a9:da:8b:
71:b7:77:99:2a:f6:93:42:f5:ac:a7:2e:2e:3c:8f:
73:90:70:33:0b:3d:93:3f:ab:d1:e0:81:3c:da:6f:
b7:f4:18:5f:34:47:12:98:6e:cf:fc:94:e2:09:8e:
9e:84:15:62:e4:5f:6d:83:0b:64:63:44:9c:b0:b2:
94:2f:da:ab:72:40:66:dc:a8:a1:d4:3c:dd:7c:f0:
8d:6c:25:4f:07:47:5e:77:05:8c:25:0e:8f:bf:b6:
f2:57:21:fe:c5:b4:52:1d:a2:04:93:c3:62:3e:8d:
b4:91:a4:6d:e4:b1:cc:15:71:8b:14:8f:aa:69:82:
fd:1a:83:78:5f:6d:9d:28:9d:43:94:27:35:eb:4f:
e6:0a:07:68:69:74:5f:80:49:66:a4:fb:ef:8e:f3:
bf:ba:e8:ba:95:82:30:6f:17:0a:7a:3f:2f:5b:5b:
21:88:27:5f:bb:57:54:92:97:11:64:e9:e5:5c:30:
e1:62:b0:18:f0:2c:4f:e3:ee:d3:c0:43:fd:5d:d8:
88:dc:71:24:18:68:e8:ee:ad:ec:3a:d9:d2:a1:02:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3B:91:D7:5A:4B:3F:77:9B:D5:77:0A:86:EE:9F:E1:56:3F:DE:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:95:b9:26:e4:fb:55:b9:ca:14:4e:cb:66:3f:a6:a3:d4:85:
63:74:3d:95:a5:0b:8d:88:2f:c6:42:58:1e:ef:07:32:d9:d3:
41:39:ae:3e:9b:93:73:4c:a2:ef:0c:f0:2b:c3:c4:8b:21:32:
97:c8:02:36:db:db:1b:52:ec:df:70:72:fc:6f:c1:c0:41:c9:
2c:4a:10:f6:dc:28:2f:c5:b6:64:53:7d:0e:99:62:40:dc:0c:
67:87:46:c2:6e:a0:97:ce:a5:a8:0f:e5:47:ea:9b:5d:73:7f:
55:76:84:9c:07:e2:99:72:a0:e1:b7:41:eb:95:47:e1:d9:98:
4f:a7:de:0d:5e:3a:53:29:2a:a7:0b:2a:c0:0c:6f:55:6b:93:
af:0b:73:3c:45:9a:f3:5e:6a:b5:bb:5c:e5:97:eb:75:ae:24:
82:e5:f8:f2:15:2a:fb:0d:6e:09:35:bd:47:25:0a:f3:ba:4e:
2b:66:c3:66:45:4f:9c:2a:b6:45:88:72:fb:96:1b:39:0b:03:
bc:0c:b7:f6:ee:06:04:f7:c5:ea:94:12:50:4a:6b:8c:1a:7f:
6f:d0:b5:a4:91:22:ad:5e:de:12:26:94:7a:9b:e1:2c:75:34:
c7:40:e0:5e:61:86:0b:06:20:14:19:73:00:4b:cc:0d:16:e0:
86:90:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:03:31 2025 by rpki-client